General

  • Target
    Setup.exe
  • Size 3.1MB
  • Sample260924-xsl35azbmd
  • SHA256 596b93354c2bc1e8e07a07e51f7cae8cb913c2d4b54a9abed108b22cfb5a2d72
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Setup.exe
    .exe 3.1MB

Setup.exe

  • IMPHASH d72c5d03522302c862bf1edd9dae317a
  • SHA256 596b93354c2bc1e8e07a07e51f7cae8cb913c2d4b54a9abed108b22cfb5a2d72
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
clear
Digest
3f:47:f8:1e:0c:71:4d:40:bf:5b:fc:11:3b:5c:15:ba:de:c0:20:63:48:cc:6c:c0:73:9e:5b:6d:db:b5:d5:85
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=101151819,CN=COREL CORPORATION,O=Alludo (COREL CORPORATION),L=Ottawa,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,1.3.6.1.4.1.311.60.2.1.2=#13104272697469736820436f6c756d626961,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
2022864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Z:\bld\CDGS-CDGSV27-BLDCDGS\BuildSource\Setup_Engines\CDGS_SetupEngine\x64\Release\Setup.pdb